Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/AXHQCfctIE8qm3CfgJv5m741MvA.roa
File: AXHQCfctIE8qm3CfgJv5m741MvA.roa (raw, json)
Hash identifier: lH4T05hC4Vf3bniB6mDX0OL+0fbAvH0yQpklYBKbyMI=
Subject key identifier: 01:71:D0:09:F7:2D:20:4F:2A:9B:70:9F:80:9B:F9:9B:BE:35:32:F0
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E737E940D443F244BC179E85B341
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/AXHQCfctIE8qm3CfgJv5m741MvA.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212372
IP address blocks: 45.83.0.0/23 maxlen: 23
45.83.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e7:37:e9:40:d4:43:f2:44:bc:17:9e:85:b3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0171d009f72d204f2a9b709f809bf99bbe3532f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c4:37:cd:ea:fe:fa:f9:72:b0:42:fd:dd:24:
b9:d6:00:18:68:7a:46:3f:b3:fb:2e:af:49:c0:8b:
f5:47:f0:a5:4c:d1:cd:a7:59:d2:1a:17:48:a5:88:
fc:f0:59:b3:76:c5:66:4b:12:18:11:04:0d:4a:30:
d1:69:bc:e4:6a:66:18:5e:ce:f3:ae:de:ab:b0:ce:
d9:55:32:6b:dc:f3:6e:b1:04:e7:06:06:f8:42:5c:
08:64:f5:8f:ae:1b:17:6f:ed:c8:c0:95:35:5a:37:
29:ca:dd:8d:a6:ed:0b:96:42:8f:ce:b8:dc:00:15:
3f:3a:fe:0d:cd:30:39:c6:a1:11:3c:75:d0:6c:e4:
15:aa:52:fa:2e:fe:7c:7b:a5:6b:b2:39:77:bc:c4:
e8:a2:97:db:bb:8d:75:a3:a8:0c:e5:9e:a8:30:61:
21:0c:1e:6d:64:92:1a:83:cf:ad:e6:f0:86:24:52:
32:cd:bf:f1:f1:16:3d:91:b6:7f:61:fa:89:95:6c:
9b:67:45:c4:52:f1:a4:e6:31:c2:3c:63:2b:09:24:
df:5d:e5:2e:37:57:6f:b5:8e:f6:bb:36:4e:14:2c:
d3:c6:54:a3:c8:b7:92:e3:ba:23:a5:72:2b:a3:c1:
5b:b0:c5:7b:e9:88:f9:ef:34:cb:97:68:46:2d:4c:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:D0:09:F7:2D:20:4F:2A:9B:70:9F:80:9B:F9:9B:BE:35:32:F0
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/AXHQCfctIE8qm3CfgJv5m741MvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.0.0/22
Signature Algorithm: sha256WithRSAEncryption
78:87:20:68:fa:46:33:84:56:70:bd:75:ba:d1:20:f5:ee:58:
2a:03:22:33:6a:25:6e:82:3e:9e:5d:60:15:67:57:de:4b:57:
01:82:f9:e3:8f:fb:b4:fc:61:45:3b:d4:87:b0:24:b0:7f:49:
b7:d8:8c:dc:7d:79:d7:3a:ae:1e:9b:fc:6a:2b:e8:c7:ba:00:
94:68:24:1c:5a:9e:22:42:ec:75:4a:bc:72:3a:9a:d6:b5:ee:
02:40:f3:47:f2:37:5a:6c:fe:ef:4c:cc:e6:9a:06:77:b5:3d:
cf:2e:51:ae:f1:df:38:ee:87:5f:0a:cd:b6:96:fc:bf:28:0d:
81:63:a7:db:39:8d:ac:8e:70:3c:02:b1:78:a2:45:27:f8:8e:
87:62:d1:aa:fd:b8:be:8f:14:08:51:f2:4e:40:09:6c:d9:67:
92:1b:ab:14:ea:c2:fd:1a:71:fd:bf:a3:e4:e7:cc:60:9b:b3:
4d:8a:dc:6e:36:47:64:34:1a:2f:7f:23:1c:46:09:89:f7:dc:
96:9e:6a:3f:72:c8:34:90:55:71:84:b7:13:d6:d9:3d:98:ea:
80:f7:62:47:e6:7e:be:3b:76:7a:9c:17:2a:b5:f7:7a:df:6d:
eb:49:56:4f:b9:fc:38:59:f3:18:95:4b:ac:47:78:e3:de:21:
8d:73:a5:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks+c36UDUQ/JEvBeehbNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwMTAyMDE0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTcxZDAwOWY3MmQyMDRmMmE5YjcwOWY4MDliZjk5YmJlMzUzMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sQ3zer++vlysEL93SS51gAYaHpG
P7P7Lq9JwIv1R/ClTNHNp1nSGhdIpYj88FmzdsVmSxIYEQQNSjDRabzkamYYXs7z
rt6rsM7ZVTJr3PNusQTnBgb4QlwIZPWPrhsXb+3IwJU1Wjcpyt2Npu0LlkKPzrjc
ABU/Ov4NzTA5xqERPHXQbOQVqlL6Lv58e6Vrsjl3vMToopfbu411o6gM5Z6oMGEh
DB5tZJIag8+t5vCGJFIyzb/x8RY9kbZ/YfqJlWybZ0XEUvGk5jHCPGMrCSTfXeUu
N1dvtY72uzZOFCzTxlSjyLeS47ojpXIro8FbsMV76Yj57zTLl2hGLUztAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFx0An3LSBPKptwn4Cb+Zu+NTLwMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvQVhIUUNmY3RJRThxbTNDZmdKdjVtNzQxTXZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVMAMA0G
CSqGSIb3DQEBCwUAA4IBAQB4hyBo+kYzhFZwvXW60SD17lgqAyIzaiVugj6eXWAV
Z1feS1cBgvnjj/u0/GFFO9SHsCSwf0m32IzcfXnXOq4em/xqK+jHugCUaCQcWp4i
Qux1SrxyOprWte4CQPNH8jdabP7vTMzmmgZ3tT3PLlGu8d847odfCs22lvy/KA2B
Y6fbOY2sjnA8ArF4okUn+I6HYtGq/bi+jxQIUfJOQAls2WeSG6sU6sL9GnH9v6Pk
58xgm7NNitxuNkdkNBovfyMcRgmJ99yWnmo/csg0kFVxhLcT1tk9mOqA92JH5n6+
O3Z6nBcqtfd6323rSVZPufw4WfMYlUusR3jj3iGNc6XV
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:04:19 2025 by rpki-client